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IN THE CLAIMS 
Please cancel claims 6-21 without prejudice or disclaimer. 
This listing of claims will replace all prior versions, and listings, of claims in 
the application. 

Listing of Claims: 

Claim 1 (original) A method for rapid intrusion detection for network 
communication comprising the steps of: 

receiving packets of network data in a network processor coupled to a network 

fabric; 

forwarding routed network data to the network fabric; and 
coupling selected data from the network data to a parallel pattern detection 
engine (PPDE), for comparing the selected data in parallel to M sequences of pattern 
data stored in the PPDE and generating a match output signal when at least one of the 
M sequences of pattern data compares to a portion of the selected data. 

Claim 2 (original) The method of claim 1, further comprising the steps of: 

storing N intrusion signatures in the M PUs sequences of pattern data with 

corresponding identification (ID) data used to identify which of the N intrusion 

signatures is detected; and 

storing action code indicating action to take in response to detecting a 

particular one of the N intrusion signatures. 

Claim 3 (original) The method of claim 2, further comprising the steps of: 

analyzing the packets of network data for validity thereby generating valid 

packets of network data as the selected data; 

comparing the selected data to the store N intrusion signatures and generating, 

at network data speed, a pattern compare signal and particular ID data when a 

particular one of the N intrusion signatures is detected; and 

executing the action code corresponding to the particular one of the N 

intrusion signatures detected. 

Claim 4 (original) The method of claim 3, wherein the PPDE comprises: 
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an input/output (I/O) interface for coupling data into and out of the PPDE; 

M processing units (PUs), each of the M PUs having compare circuitry for 
comparing each of the sequence of input data to pattern data stored in each of the M 
PUs and generating a compare output, wherein an address pointer selecting the 
pattern data in each of the M PUs is modified in response to a logic state of the 
compare output and an operation code stored with the pattern data; 

an input bus for coupling the sequence of input data to each of the M PUs in 
parallel; 

an output bus coupled to the I/O interface for sending output data to the I/O 
interface; 

control circuitry coupled to the I/O interface and coupling control data on a 
control data bus and identification (ID) on an ID bus to each of the M processing 
units; and 

ID selection circuitry for selecting a match ID from ID data identifying the M 
PUs in response to a pattern match signal and match mode data, wherein the match ID 
and match data corresponding to the match ID are saved in a temporary register as the 
output data. 

Claim 5 (original) The method of claim 3, wherein the PPDE further comprises 
cascade circuitry coupled from each of the M PUs to one or more adjacent PUs within 
the M PUs for selectively coupling chain data between one or more groups of two or 
more adjacent PUs selected from the M PUs in response to the control data. 

Claims 6-21 (cancelled) 
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